AWS eks documentation change
Summary
Standardized IAM ARNs with region placeholders in trust policies and permission boundaries
Security assessment
Formatting updates for regional ARNs. Maintains existing security configurations without introducing new features.
Diff
diff --git a/eks/latest/userguide/pod-id-assign-target-role.md b/eks/latest/userguide/pod-id-assign-target-role.md index 5f5f15b50..3a8fc124b 100644 --- a//eks/latest/userguide/pod-id-assign-target-role.md +++ b//eks/latest/userguide/pod-id-assign-target-role.md @@ -79 +79 @@ In this step, you will establish a secure trust chain by creating and configurin - "AWS": "arn:aws:iam::111122223333:root" + "AWS": "®ion-arn;iam::111122223333:root" @@ -87 +87 @@ In this step, you will establish a secure trust chain by creating and configurin - "aws:RequestTag/eks-cluster-arn": "arn:aws:eks:us-east-1:111122223333:cluster/example-cluster", + "aws:RequestTag/eks-cluster-arn": "®ion-arn;eks:®ion_api_default;:111122223333:cluster/example-cluster", @@ -92 +92 @@ In this step, you will establish a secure trust chain by creating and configurin - "aws:PrincipalARN": "arn:aws:iam::111122223333:role/eks-pod-identity-primary-role" + "aws:PrincipalARN": "®ion-arn;iam::111122223333:role/eks-pod-identity-primary-role" @@ -110 +110 @@ If you [Disabled Session Tags](https://docs.aws.amazon.com/eks/latest/userguide/ - "AWS": "arn:aws:iam::111122223333:root" + "AWS": "®ion-arn;iam::111122223333:root" @@ -118 +118 @@ If you [Disabled Session Tags](https://docs.aws.amazon.com/eks/latest/userguide/ - "aws:PrincipalARN": "arn:aws:iam::111122223333:role/eks-pod-identity-primary-role" + "aws:PrincipalARN": "®ion-arn;iam::111122223333:role/eks-pod-identity-primary-role" @@ -125 +125 @@ If you [Disabled Session Tags](https://docs.aws.amazon.com/eks/latest/userguide/ - "AWS": "arn:aws:iam::111122223333:root" + "AWS": "®ion-arn;iam::111122223333:root" @@ -165 +165 @@ In this step, you will update the permission policy of the [EKS Pod Identity rol - "Resource": "arn:aws:iam::222233334444:role/eks-pod-identity-aws-resources" + "Resource": "®ion-arn;iam::222233334444:role/eks-pod-identity-aws-resources"